- Latest release
- Not known: cve.now hasn't read this package's releases
- Newest unaffected release
- Not known without release data
- Advisories
- 8
- Registry
- NuGet
Advisories 8
- CVE-2020-1597Unrated
ASP.NET Core Denial of Service Vulnerability
Affected: from 2.1.0, fixed in 2.1.21.
- CVE-2020-0603Unrated
A remote code execution vulnerability exists in ASP.NET Core software when the software fails to handle objects in memory.An attacker who…
Affected: from 2.1.0, fixed in 2.1.15.
- CVE-2020-0602Unrated
A denial of service vulnerability exists when ASP.NET Core improperly handles web requests, aka 'ASP.NET Core Denial of Service…
Affected: from 2.1.0, fixed in 2.1.15.
- CVE-2019-1075Unrated
A spoofing vulnerability exists in ASP.NET Core that could lead to an open redirect, aka 'ASP.NET Core Spoofing Vulnerability'.
Affected: from 2.2.0, fixed in 2.2.6; from 2.1.0, fixed in 2.1.12.
- CVE-2019-0564Unrated
A denial of service vulnerability exists when ASP.NET Core improperly handles web requests, aka "ASP.NET Core Denial of Service…
Affected: from 2.2.0, fixed in 2.2.1; from 2.1.0, fixed in 2.1.7.
- CVE-2018-8409Unrated
A denial of service vulnerability exists when System.IO.Pipelines improperly handles requests, aka "System.IO.Pipelines Denial of…
Affected: from 2.1.0, fixed in 2.1.4.
- CVE-2018-8269Unrated
A denial of service vulnerability exists when OData Library improperly handles web requests, aka "OData Denial of Service Vulnerability."…
Affected: from 2.1.0, fixed in 2.1.13; from 2.2.0, fixed in 2.2.7.
- CVE-2017-11879Unrated
ASP.NET Core 2.0 allows an attacker to steal log-in session information such as cookies or authentication tokens via a specially crafted…
Affected: from 2.0.0, fixed in 2.0.3.